Detecting Low Level Kernel Rootkit PCACM. 7.5 Pro:

I show you a little instruction how to detect the extreme low level key logger thing PC Act.Mon 7.5:

This insidious thing even hides from filemons, the only thing which should give you alert is the winlogon notify behaviour:

http://i15.tinypic.com/2utpwtx.png

Darkspy is a good tool to detect the low level file stuff:

http://i15.tinypic.com/2rd7mn9.png

With AAK you may get this very good attention info:

http://i15.tinypic.com/2cwu2cp.png

Beside neither Gmer was able to give a good detection hint (you must look exactly to find a hint), nor Rootkit Unhooker detected it. Non of the popular Antiviruses detect it actually.
(Only if you use manual hidden file and service search, but you must look damn exact)

Here is the hint of gmer, but nohting red underlined or a real rootkit tip. If you unhook reboot is most likely.

http://i15.tinypic.com/2agmg46.png

 

How bad darkspy wont run on a multi processor environment.

 

It works on dualcore, but don´t know about MPs.

Nevertheless use Gmer and watch out for empty service descr..